Privacy

Playing without an account stores nothing about you on our server: no cookie, no profile. Your settings stay in your own browser. We count visits and games in aggregate, on our own server, with no third-party trackers.

If you sign in with Apple, we ask Apple for nothing but an id it keeps for ManaFlow: never your name or email. We then keep:

• the display name you choose;
• which service you sign in with and that service's id for you;
• a sign-in cookie (only a scrambled copy of it is stored), which ends after 180 days without use;
• the games you finish signed in: result, opponent, how it ended, the deck you played, the AI's deck in a game against the AI (for Rematch), and the card that won;
• your decks: the ones you played (the 30 most recent) and the ones you save.

Feedback you send while signed in carries your display name and account number, unless you tick Send anonymously. Reports are read and then kept with our bug notes; Delete account does not remove them, but they hold only what you wrote and the game it was about.

A friend's decklist is never stored in your history, only their name and the result.

How long: until you delete it. Daily backups are kept for 14 days, so a deleted account is gone from them within 14 days.

Your data: the account panel (the round icon on the home screen) has Download my data (everything above, as a file) and Delete account (everything above, at once; it also tells Apple to forget the sign-in). Removing ManaFlow from your Apple ID's settings does the same.